$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa File: 514e116e-7b0c-3978-b9a2-1653b3a7d019.roa (raw, json) Hash identifier: OQ/vtoroqwmEuFjxv5kx1JVP1yUP/r0qbOS4rDgX6c4= Subject key identifier: 1F:62:01:06:CA:AC:0E:6B:B2:0C:28:DE:86:E0:EE:E6:46:64:12:3E Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A14C2EF78C9854D8D9DC271A0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa Signing time: Wed 04 Jun 2025 16:09:42 +0000 ROA not before: Wed 04 Jun 2025 16:09:42 +0000 ROA not after: Tue 02 Sep 2025 16:09:42 +0000 asID: 2615 IP address blocks: 147.1.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:c2:ef:78:c9:85:4d:8d:9d:c2:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jun 4 16:09:42 2025 GMT Not After : Sep 2 16:09:42 2025 GMT Subject: CN=6fdd0ec6-32b0-4771-9f58-96779cbe2206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:50:41:9a:82:6e:32:4b:2c:f4:32:d8:57:11: c2:a5:53:3d:a5:e4:00:77:fe:8f:34:11:f2:5e:dd: c1:9f:95:eb:da:45:69:3d:f3:67:30:be:39:4f:d1: 18:02:28:40:9b:0b:fa:81:31:29:cf:c0:20:3f:36: e7:72:da:3c:ae:87:55:47:ac:66:24:57:73:71:1c: 54:8a:69:ff:87:b0:f4:51:ad:a5:55:7e:fd:0a:f8: 9c:d0:06:1c:20:9d:de:f7:af:b8:45:4c:ff:f7:11: af:cc:77:d4:0c:ff:a4:4f:e5:b1:2a:37:6a:10:67: f3:fb:d5:35:7d:36:17:81:dc:05:dd:c4:5f:24:8c: 73:78:0c:18:0d:a1:ea:62:10:d7:dd:f9:67:86:8f: 5a:f8:8b:b6:7c:cf:39:28:27:41:9c:90:13:c3:86: e2:5d:b0:6d:7b:7d:67:5f:3c:73:9e:e0:84:ea:55: 44:a0:08:c6:b4:a0:0c:39:3b:bb:c2:69:15:d8:09: fd:78:b5:ed:4c:f9:ee:32:fb:65:3f:5e:a5:19:23: e6:fc:a0:ab:62:a7:65:c8:c9:9a:ad:d8:a3:80:98: 77:06:d1:e4:ad:d3:77:a7:25:c8:dd:ec:e7:10:db: 02:95:4b:12:c2:4a:c6:97:a4:6a:e2:61:43:54:a0: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:62:01:06:CA:AC:0E:6B:B2:0C:28:DE:86:E0:EE:E6:46:64:12:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:95:58:90:36:87:43:45:0b:ac:b8:a6:a1:a9:5a:b4:27:62: cb:4c:6f:c1:90:d4:35:76:e4:cd:22:58:df:f6:16:9f:e8:fd: a3:8e:a1:87:aa:3d:c8:77:98:c3:8b:ce:f7:b9:22:72:3c:dc: 82:0f:52:c4:e7:23:77:75:2f:ab:17:36:39:ae:1d:5d:2e:6d: 8c:2e:79:9a:88:89:4b:ef:d7:0f:c2:c3:f8:41:d1:37:8b:c0: cc:da:08:4d:bf:00:61:57:51:d7:6c:9e:51:2a:be:46:a9:63: f0:bf:cd:b9:32:16:35:14:5f:2b:b8:51:7d:c5:b1:4e:7d:35: 16:8d:bd:b6:5c:78:5c:4e:2b:3c:ff:2c:6c:f5:60:d7:14:38: 3e:3a:2b:9d:99:29:10:6c:07:ce:c9:8d:62:3c:01:af:86:d1: 11:c1:6a:04:e0:d0:07:f2:f0:b5:7b:e6:2c:a5:e1:96:7f:53: 4e:f5:a4:a6:86:8d:26:41:6e:e2:46:9c:54:b2:46:3a:90:57: a6:2f:bf:87:e8:a4:ed:ac:58:1d:b7:de:aa:cf:56:21:74:27: 17:d4:12:1a:ca:02:35:e3:d5:5d:50:9b:a2:e4:30:91:4e:9e: ae:44:cc:a6:c2:e7:32:3d:df:f0:2f:f7:40:23:62:85:e3:22: 83:d1:67:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUwu94yYVNjZ3CcaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDYwNDE2MDk0MloXDTI1MDkwMjE2MDk0MlowLzEtMCsGA1UEAxMk NmZkZDBlYzYtMzJiMC00NzcxLTlmNTgtOTY3NzljYmUyMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lBBmoJuMkss9DLYVxHCpVM9peQAd/6PNBHy Xt3Bn5Xr2kVpPfNnML45T9EYAihAmwv6gTEpz8AgPzbncto8rodVR6xmJFdzcRxU imn/h7D0Ua2lVX79Cvic0AYcIJ3e96+4RUz/9xGvzHfUDP+kT+WxKjdqEGfz+9U1 fTYXgdwF3cRfJIxzeAwYDaHqYhDX3flnho9a+Iu2fM85KCdBnJATw4biXbBte31n XzxznuCE6lVEoAjGtKAMOTu7wmkV2An9eLXtTPnuMvtlP16lGSPm/KCrYqdlyMma rdijgJh3BtHkrdN3pyXI3eznENsClUsSwkrGl6Rq4mFDVKAPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9iAQbKrA5rsgwo3obg7uZGZBI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTE0ZTExNmUtN2IwYy0z OTc4LWI5YTItMTY1M2IzYTdkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKVWJA2h0NFC6y4pqGpWrQnYstMb8GQ1DV25M0iWN/2Fp/o/aOOoYeq Pch3mMOLzve5InI83IIPUsTnI3d1L6sXNjmuHV0ubYwueZqIiUvv1w/Cw/hB0TeL wMzaCE2/AGFXUddsnlEqvkapY/C/zbkyFjUUXyu4UX3FsU59NRaNvbZceFxOKzz/ LGz1YNcUOD46K52ZKRBsB87JjWI8Aa+G0RHBagTg0Afy8LV75iyl4ZZ/U071pKaG jSZBbuJGnFSyRjqQV6Yvv4fopO2sWB233qrPViF0JxfUEhrKAjXj1V1Qm6LkMJFO nq5EzKbC5zI93/Av90AjYoXjIoPRZ3s= -----END CERTIFICATE-----Generated at Sun Jun 15 15:10:31 2025 by rpki-client